Search Results for "http header injection"
Sort By:
Showing 262 open source projects for "http header injection"
View related business solutions-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
1
HTTP
Rust HTTP types
This crate is a general purpose library for common types found when working with the HTTP protocol. You’ll find Request and Response types for working as either a client or a server as well as all of their components. Notably you’ll find Uri for what a Request is requesting, a Method for how it’s being requested, a StatusCode for what sort of response came back, a Version for how this was communicated, and HeaderName/HeaderValue definitions to get grouped in a HeaderMap to work with... -
2
HTTP.jl
HTTP for Julia
HTTP.jl is a pure Julia implementation of the HTTP protocol, providing tools for building HTTP clients and servers. It enables users to send requests, handle responses, and construct REST APIs or web services entirely in Julia. HTTP.jl supports TLS, cookies, headers, streaming, and middleware, making it suitable for both simple scripting and full-scale web service development. -
3
clj-http
An idiomatic clojure http client wrapping the apache client
clj-http is a popular Clojure library for making HTTP requests, built as a wrapper around Apache’s HttpClient. It uses Ring-style request/response maps and middleware, fitting seamlessly into idiomatic Clojure applications. clj-http allows coercing the body of the request either before it is sent (input coercion), or after it’s received (output coercion) from the server. -
4
http-proxy-middleware
Http-proxy middleware for connect, express and browser-sync
Node.js proxying made simple. Configure proxy middleware with ease for connect, express, browser-sync and many more. All http-proxy options can be used, along with some extra http-proxy-middleware options. Determine which requests should be proxied to the target host. Target host to proxy to. (protocol + host). Providing an alternative way to decide which requests should be proxied; In case you are not able to use the server's path parameter to mount the proxy or when you need more... -
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
5
SafeLine
Serve as a reverse proxy to protect your web services from attacks
SafeLine is a self-hosted WAF(Web Application Firewall) to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, CRLF injection, LDAP injection, XPath injection, RCE, XXE, SSRF, path traversal, backdoor, brute force, HTTP-flood, bot abuse, among others. By deploying a WAF in front of a web application, a shield is placed between the web application and the Internet. ... -
6
nghttp2
HTTP/2 C Library and tools
nghttp2 is an implementation of HTTP/2 and its header compression algorithm HPACK in C. The framing layer of HTTP/2 is implemented as a form of reusable C library. On top of that, we have implemented HTTP/2 client, server and proxy. We have also developed a load test and benchmarking tool for HTTP/2. We have participated in httpbis working group since HTTP/2 draft-04, which is the first implementation draft. -
7
cookie
HTTP server cookie parsing and serialization
Basic HTTP cookie parser and serializer for HTTP servers. This is a Node.js module available through the npm registry. Installation is done using the npm install command. Parse an HTTP Cookie header string and return an object of all cookie name-value pairs. The str argument is the string representing a Cookie header value and options is an optional object containing additional parsing options. -
8
basic-auth
Generic basic auth Authorization header field parser
Generic basic auth Authorization header field parser for whatever. This is a Node.js module available through the npm registry. Get the basic auth credentials from the given request. The Authorization header is parsed and if the header is invalid, undefined is returned, otherwise an object with name and pass properties. Parse a basic auth authorization header string. This will return an object with name and pass properties, or undefined if the string is invalid. -
9
Crow Framework
A Fast and Easy to use microframework for the web
...Easy Routing (similar to flask). Type-safe Handlers. Blazingly fast (see this benchmark and this benchmark). Built-in JSON support. Mustache-based templating library (crow::mustache). Header-only library (single header file available). Middleware support for extensions. HTTP/1.1 and Websocket support. Multi-part request and response support. Uses modern C++ (11/14). -
Build Securely on AWS with Proven FrameworksMoving to the cloud brings new challenges. How can you manage a larger attack surface while ensuring great network performance? Turn to Fortinet’s Tested Reference Architectures, blueprints for designing and securing cloud environments built by cybersecurity experts. Learn more and explore use cases in this white paper.
-
10
WireMock
A tool for mocking HTTP services
HTTP response stubbing, matchable on URL, header and body content patterns. Request verification, runs in unit tests, as a standalone process or as a WAR app. Configurable via a fluent Java API, JSON files and JSON over HTTP. Record/playback of stubs, fault injection, per-request conditional proxying, browser proxying for request inspection and replacement. -
11
Antigravity-Proxy
Transparent proxy injector for Antigravity
Antigravity Proxy is a Windows proxy injection tool made specifically for the Antigravity editor. It is designed to route Antigravity-related traffic through a SOCKS5 or HTTP proxy without requiring Clash TUN mode. The project focuses on selective proxying instead of taking over all system traffic. This makes it useful for users who need Antigravity to work through a proxy while keeping the rest of their Windows network behavior unchanged. -
12
Symfony FrameworkBundle
Provides a tight integration between Symfony components
Symfony Framework Bundle is the core bundle of the Symfony PHP framework, providing the essential components and configuration needed to build robust web applications. It integrates various Symfony components, such as routing, templating, and dependency injection, into a cohesive structure. This bundle serves as the foundation for Symfony applications and enables developers to efficiently manage routes, templates, services, and more. -
13
cpp-httplib
A C++ header-only HTTP/HTTPS server and client library
A C++11 single-file header-only cross-platform HTTP/HTTPS library. It's extremely easy to setup. Just include the httplib.h file in your code! This is a multi-threaded 'blocking' HTTP library. If you are looking for a 'non-blocking' library, this is not the one that you want. SSL support is available with CPPHTTPLIB_OPENSSL_SUPPORT. libssl and libcrypto should be linked. -
14
Slim
PHP micro framework that helps you quickly write web applications
...The easiest way to start working with Slim is to create a project using Slim-Skeleton as a base by running a bash command. Slim provides a fast and powerful router that maps route callbacks to specific HTTP request methods and URIs. It supports parameters and pattern matching. Build your application with concentric middleware to tweak the HTTP request and response objects around your Slim app. Slim supports any PSR-7 HTTP message implementation so you may inspect and manipulate HTTP message method, status, URI, headers, cookies, and body. ... -
15
Secure
HTTP middleware for Go that facilitates some quick security wins
...When IsDevelopment is true, the AllowedHosts, SSLRedirect, STS header, and HPKP header will not be in effect. This allows you to work in development/test mode and not have any annoying redirects to HTTPS (ie. development can happen on HTTP), or block localhost has a bad host. Secure comes with a variety of configuration options. Secure allows you to set a custom function for the AllowRequestFunc option. -
16
Sliver
Adversary Emulation Framework
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver's implants support C2 over Mutual TLS (mTLS), WireGuard, HTTP(S), and DNS and are dynamically compiled with per-binary asymmetric encryption keys. The server and client support MacOS, Windows, and Linux. Implants are supported on MacOS, Windows, and Linux (and possibly every Golang compiler target but we've not tested them all). -
17
frp
A Fast Reverse Proxy
frp stands for exactly what it is: a fast reverse proxy. It helps you expose a local server behind a NAT or firewall to the Internet. It is currently under development, but already supports TCP and UDP, as well as HTTP and HTTPS protocols where requests can be forwarded to internal services by domain name. It also has a P2P connect mode and many other nifty features. These include configuration files, environment variables, a dashboard that shows you frp's status and proxies' statistics... -
18
Beast
HTTP and WebSocket built on Boost.Asio in C++11
Beast is a header-only C++ library that provides low-level HTTP, WebSocket, and networking protocol building blocks on top of Boost.Asio. It is designed for developers who need to build interoperable clients, servers, proxies, gateways, or custom protocol components rather than using a high-level web framework. Beast follows Boost.Asio’s asynchronous model, so it fits naturally into event-driven C++ networking applications. -
19
Maltrail
Malicious traffic detection system
Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user-defined lists, where trail can be anything from domain name, URL, IP address (e.g. 185.130.5.231 for the known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in the discovery of unknown threats (e.g. new malware). Sensor(s) is a standalone component running on the monitoring node (e.g. Linux platform connected passively to the SPAN/mirroring port or transparently inline on a Linux bridge) or at the standalone machine (e.g. ... -
20
Proxyman
Web Debugging Proxy for macOS, iOS, and Android
...Narrow down your search with Proxyman's Multiple Filters. You can combine complex filtered criteria like Protocol, Content-Type, URL, Request Header, Response Header, Body, etc that find exact what you're looking for. -
21
Deepkit Framework
A new full-featured and high-performance TypeScript framework
...Deepkit's type compiler makes it possible to use the whole TypeScript type system in any JavaScript runtime for the first time enabling completely new ways of writing data-driven applications. A framework that brings aligned libraries together to make web application development faster, more productive, and easier than ever. Powerful dependency injection container with type expressions to make HTTP routes, CLI commands, and RPC controllers safe, fast, and easy to write. No json configuration files, unnecessary boilerplate, schema files, or code generation: TypeScript is utilized to its fullest capabilities. -
22
Atlantis iOS
A lightweight and powerful iOS framework for intercepting HTTP/HTTPS
...Narrow down your search with Proxyman's Multiple Filters. You can combine complex filtered criteria like Protocol, Content-Type, URL, Request Header, Response Header, Body, etc that find exact what you're looking for. -
23
EaseProbe
A simple, standalone, and lightweight tool
EaseProbe is a simple, standalone, and lightweight tool that can do health/status checking, written in Go. Checking the HTTP status code, Support mTLS, HTTP Basic Auth, and can set the Request Header/Body. Check whether a TCP connection can be established or not. Run a Shell command and check the result. Run a remote command via SSH and check the result. Support the bastion/jump server. Connect to a given port using TLS and (optionally) validate for revoked or expired certificates. ... -
24
Cookie Parser
Parse HTTP request cookies
Parse Cookie header and populate req.cookies with an object keyed by the cookie names. Optionally you may enable signed cookie support by passing a secret string, which assigns req.secret so it may be used by other middleware. A middleware for Express.js that parses cookies from HTTP requests and makes them accessible in req.cookies. -
25
Retrofit For Dart
Retrofit.dart is an dio client generator using source_gen
retrofit.dart is a type conversion dio client generator using source_gen and inspired by Chopper and Retrofit. If you want to parse models on a separate thread, you can take advantage of the compute function, just like Dio does when converting String data responses into json objects. Avoid using Map values, otherwise, multiple background isolates will be spawned to perform the computation, which is extremely intensive for Dart.
